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We describe JFK, a new key exchange protocol, primarily designed for use in the IP Security 
Architecture. It is simple, efficient, and secure; we sketch a proof of the latter property. JFK 
also has a number of novel engineering parameters that permit a variety of trade-offs, most 
notably the ability to balance the need for perfect forward secrecy against susceptibility to 
denial-of-service attacks. 
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We describe Just Fast Keying (JFK), a new key-exchange protocol, primarily designed for 
use in the IP security architecture. It is simple, efficient, and secure; we sketch a proof of 
the latter property. JFK also has a number of novel engineering parameters that permit a 
variety of tradeoffs, most notably the ability to balance the need for perfect forward secrecy 
against susceptibility to denial-of-service attacks. 
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